# Vulnerabilities published in 2015


- [CVE-2015-3949](https://insights.sbomify.com/CVE-2015-3949/): Information disclosure in sinapsi:esolar light firmware (low 2.1)
- [CVE-2015-3948](https://insights.sbomify.com/CVE-2015-3948/): Cross-site scripting in advantech:webaccess (medium 5.4)
- [CVE-2015-3947](https://insights.sbomify.com/CVE-2015-3947/): SQL injection in advantech:webaccess (high 8.1)
- [CVE-2015-3946](https://insights.sbomify.com/CVE-2015-3946/): Cross-site request forgery in advantech:webaccess (high 8.8)
- [CVE-2015-3943](https://insights.sbomify.com/CVE-2015-3943/): Information disclosure in advantech:webaccess (medium 5.3)
- [CVE-2015-3942](https://insights.sbomify.com/CVE-2015-3942/): Cross-site scripting in garrettcom:magnum 10k firmware (medium 4.3)
- [CVE-2015-3940](https://insights.sbomify.com/CVE-2015-3940/): Privilege escalation in schneider-electric:wonderware system platform 2014 (medium 6.9)
- [CVE-2015-3939](https://insights.sbomify.com/CVE-2015-3939/): Path traversal in ids:nc854 (medium 6.8)
- [CVE-2015-3938](https://insights.sbomify.com/CVE-2015-3938/): Denial of service in mitsubishi electric:melsec fx3g (high 7.8)
- [CVE-2015-3935](https://insights.sbomify.com/CVE-2015-3935/): Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability (medium 4.3)
- [CVE-2015-3934](https://insights.sbomify.com/CVE-2015-3934/): SQL injection in fiyo:fiyo cms (critical 9.8)
- [CVE-2015-3933](https://insights.sbomify.com/CVE-2015-3933/): MetalGenix GeniXCMS vulnerable to SQL Injection (critical 9.8)
- [CVE-2015-3932](https://insights.sbomify.com/CVE-2015-3932/): Security feature bypass in netlock:mokka (high 7.8)
- [CVE-2015-3931](https://insights.sbomify.com/CVE-2015-3931/): Security feature bypass in microsec:e-szigno (high 7.8)
- [CVE-2015-3923](https://insights.sbomify.com/CVE-2015-3923/): Information disclosure in coppermine-gallery:coppermine photo gallery (medium 5.0)
- [CVE-2015-3922](https://insights.sbomify.com/CVE-2015-3922/): Open redirect in coppermine-gallery:coppermine photo gallery (medium 5.8)
- [CVE-2015-3921](https://insights.sbomify.com/CVE-2015-3921/): Cross-site scripting in coppermine-gallery:coppermine photo gallery (low 3.5)
- [CVE-2015-3913](https://insights.sbomify.com/CVE-2015-3913/): Denial of service in huawei:s12700 firmware (high 7.5)
- [CVE-2015-3912](https://insights.sbomify.com/CVE-2015-3912/): Information disclosure in huawei:e355s mobile wifi firmware (medium 5.0)
- [CVE-2015-3911](https://insights.sbomify.com/CVE-2015-3911/): Auth bypass in huawei:e587 mobile wifi firmware (critical 9.0)
- [CVE-2015-3910](https://insights.sbomify.com/CVE-2015-3910/): Other in google:chrome (high 7.5)
- [CVE-2015-3908](https://insights.sbomify.com/CVE-2015-3908/): Ansible does not verify that the server hostname matches a domain name in certificates (medium 4.3)
- [CVE-2015-3907](https://insights.sbomify.com/CVE-2015-3907/): CodeIgniter Rest Server XXE Vulnerability (critical 9.8)
- [CVE-2015-3906](https://insights.sbomify.com/CVE-2015-3906/): Memory corruption in wireshark:wireshark (medium 5.0)
- [CVE-2015-3905](https://insights.sbomify.com/CVE-2015-3905/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2015-3904](https://insights.sbomify.com/CVE-2015-3904/): Cross-site scripting in roomcloud:roomcloud (medium 4.3)
- [CVE-2015-3903](https://insights.sbomify.com/CVE-2015-3903/): Security feature bypass in phpmyadmin:phpmyadmin (medium 4.3)
- [CVE-2015-3902](https://insights.sbomify.com/CVE-2015-3902/): Cross-site request forgery in phpmyadmin:phpmyadmin (medium 6.8)
- [CVE-2015-3900](https://insights.sbomify.com/CVE-2015-3900/): RubyGems vulnerable to DNS hijack attack (medium 5.0)
- [CVE-2015-3898](https://insights.sbomify.com/CVE-2015-3898/): Open redirect in bonitasoft:bonita bpm portal (medium 6.1)
- [CVE-2015-3897](https://insights.sbomify.com/CVE-2015-3897/): Path traversal in bonitasoft:bonita bpm portal (medium 5.0)
- [CVE-2015-3890](https://insights.sbomify.com/CVE-2015-3890/): Use after free in litespeedtech:openlitespeed (high 7.5)
- [CVE-2015-3888](https://insights.sbomify.com/CVE-2015-3888/): Other in jolla:sailfish os (high 7.5)
- [CVE-2015-3887](https://insights.sbomify.com/CVE-2015-3887/): Privilege escalation in proxychains-ng project:proxychains-ng (high 7.8)
- [CVE-2015-3886](https://insights.sbomify.com/CVE-2015-3886/): Security feature bypass in libinfinity project:libinfinity (critical 9.8)
- [CVE-2015-3885](https://insights.sbomify.com/CVE-2015-3885/): Integer overflow in dcraw project:dcraw (medium 4.3)
- [CVE-2015-3884](https://insights.sbomify.com/CVE-2015-3884/): File upload in qdpm:qdpm (high 8.8)
- [CVE-2015-3883](https://insights.sbomify.com/CVE-2015-3883/): Cross-site scripting in qdpm:qdpm (medium 6.1)
- [CVE-2015-3882](https://insights.sbomify.com/CVE-2015-3882/): Information disclosure in qdpm:qdpm (medium 5.3)
- [CVE-2015-3881](https://insights.sbomify.com/CVE-2015-3881/): Information disclosure in qdpm:qdpm (high 7.5)
- [CVE-2015-3880](https://insights.sbomify.com/CVE-2015-3880/): phpBB Open Redirect (medium 6.1)
- [CVE-2015-3879](https://insights.sbomify.com/CVE-2015-3879/): Privilege escalation in google:android (critical 9.3)
- [CVE-2015-3878](https://insights.sbomify.com/CVE-2015-3878/): Security feature bypass in google:android (medium 4.3)
- [CVE-2015-3877](https://insights.sbomify.com/CVE-2015-3877/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3876](https://insights.sbomify.com/CVE-2015-3876/): Memory corruption in google:android (critical 9.3)
- [CVE-2015-3875](https://insights.sbomify.com/CVE-2015-3875/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3874](https://insights.sbomify.com/CVE-2015-3874/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3873](https://insights.sbomify.com/CVE-2015-3873/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3872](https://insights.sbomify.com/CVE-2015-3872/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3871](https://insights.sbomify.com/CVE-2015-3871/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3870](https://insights.sbomify.com/CVE-2015-3870/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3869](https://insights.sbomify.com/CVE-2015-3869/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3868](https://insights.sbomify.com/CVE-2015-3868/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3867](https://insights.sbomify.com/CVE-2015-3867/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3865](https://insights.sbomify.com/CVE-2015-3865/): Privilege escalation in google:android (critical 9.3)
- [CVE-2015-3864](https://insights.sbomify.com/CVE-2015-3864/): Integer overflow in google:android (critical 10.0)
- [CVE-2015-3863](https://insights.sbomify.com/CVE-2015-3863/): Integer overflow in google:android (critical 9.3)
- [CVE-2015-3862](https://insights.sbomify.com/CVE-2015-3862/): Denial of service in google:android (medium 5.0)
- [CVE-2015-3861](https://insights.sbomify.com/CVE-2015-3861/): Integer overflow in google:android (medium 5.0)
- [CVE-2015-3860](https://insights.sbomify.com/CVE-2015-3860/): Security feature bypass in google:android (high 7.2)
- [CVE-2015-3858](https://insights.sbomify.com/CVE-2015-3858/): Security feature bypass in google:android (critical 9.3)
- [CVE-2015-3854](https://insights.sbomify.com/CVE-2015-3854/): Missing authorization in google:android (high 7.5)
- [CVE-2015-3849](https://insights.sbomify.com/CVE-2015-3849/): Memory corruption in google:android (critical 9.3)
- [CVE-2015-3847](https://insights.sbomify.com/CVE-2015-3847/): Missing authorization in google:android (medium 6.4)
- [CVE-2015-3845](https://insights.sbomify.com/CVE-2015-3845/): Privilege escalation in google:android (medium 6.8)
- [CVE-2015-3844](https://insights.sbomify.com/CVE-2015-3844/): Other in google:android (medium 6.8)
- [CVE-2015-3843](https://insights.sbomify.com/CVE-2015-3843/): Missing authorization in google:android (critical 9.3)
- [CVE-2015-3842](https://insights.sbomify.com/CVE-2015-3842/): Memory corruption in google:android (critical 9.3)
- [CVE-2015-3840](https://insights.sbomify.com/CVE-2015-3840/): Missing authorization in google:android (medium 5.5)
- [CVE-2015-3839](https://insights.sbomify.com/CVE-2015-3839/): Null dereference in google:android (medium 5.5)
- [CVE-2015-3837](https://insights.sbomify.com/CVE-2015-3837/): Deserialization in google:android (critical 9.3)
- [CVE-2015-3836](https://insights.sbomify.com/CVE-2015-3836/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3835](https://insights.sbomify.com/CVE-2015-3835/): Memory corruption in google:android (critical 9.3)
- [CVE-2015-3834](https://insights.sbomify.com/CVE-2015-3834/): Integer overflow in google:android (critical 10.0)
- [CVE-2015-3833](https://insights.sbomify.com/CVE-2015-3833/): Security feature bypass in google:android (medium 4.3)
- [CVE-2015-3832](https://insights.sbomify.com/CVE-2015-3832/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3831](https://insights.sbomify.com/CVE-2015-3831/): Memory corruption in google:android (critical 9.3)
- [CVE-2015-3830](https://insights.sbomify.com/CVE-2015-3830/): Other in google:android (medium 6.5)
- [CVE-2015-3829](https://insights.sbomify.com/CVE-2015-3829/): Integer overflow in google:android (critical 10.0)
- [CVE-2015-3828](https://insights.sbomify.com/CVE-2015-3828/): Integer overflow in google:android (critical 10.0)
- [CVE-2015-3827](https://insights.sbomify.com/CVE-2015-3827/): Integer overflow in google:android (critical 9.3)
- [CVE-2015-3826](https://insights.sbomify.com/CVE-2015-3826/): Integer overflow in google:android (medium 5.0)
- [CVE-2015-3824](https://insights.sbomify.com/CVE-2015-3824/): Integer overflow in google:android (critical 10.0)
- [CVE-2015-3823](https://insights.sbomify.com/CVE-2015-3823/): Memory corruption in google:android (critical 10.0)
- [CVE-2015-3815](https://insights.sbomify.com/CVE-2015-3815/): Memory corruption in wireshark:wireshark (medium 5.0)
- [CVE-2015-3814](https://insights.sbomify.com/CVE-2015-3814/): Denial of service in oracle:solaris (medium 5.0)
- [CVE-2015-3813](https://insights.sbomify.com/CVE-2015-3813/): Denial of service in wireshark:wireshark (medium 5.0)
- [CVE-2015-3812](https://insights.sbomify.com/CVE-2015-3812/): Denial of service in oracle:linux (high 7.8)
- [CVE-2015-3811](https://insights.sbomify.com/CVE-2015-3811/): Memory corruption in oracle:linux (medium 5.0)
- [CVE-2015-3810](https://insights.sbomify.com/CVE-2015-3810/): Denial of service in wireshark:wireshark (high 7.8)
- [CVE-2015-3809](https://insights.sbomify.com/CVE-2015-3809/): Denial of service in wireshark:wireshark (high 7.8)
- [CVE-2015-3808](https://insights.sbomify.com/CVE-2015-3808/): Denial of service in wireshark:wireshark (high 7.8)
- [CVE-2015-3807](https://insights.sbomify.com/CVE-2015-3807/): Memory corruption in apple:iphone os (medium 4.3)
- [CVE-2015-3806](https://insights.sbomify.com/CVE-2015-3806/): Security feature bypass in apple:iphone os (high 7.2)
- [CVE-2015-3805](https://insights.sbomify.com/CVE-2015-3805/): Security feature bypass in apple:iphone os (high 7.2)
- [CVE-2015-3804](https://insights.sbomify.com/CVE-2015-3804/): Memory corruption in apple:iphone os (high 7.5)
- [CVE-2015-3803](https://insights.sbomify.com/CVE-2015-3803/): Security feature bypass in apple:iphone os (high 7.2)
- [CVE-2015-3802](https://insights.sbomify.com/CVE-2015-3802/): Security feature bypass in apple:iphone os (high 7.2)
- [CVE-2015-3801](https://insights.sbomify.com/CVE-2015-3801/): Security feature bypass in apple:iphone os (medium 5.0)
- [CVE-2015-3800](https://insights.sbomify.com/CVE-2015-3800/): Memory corruption in apple:iphone os (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/47/
